Mais um e-mail fraude, dessa vez mal feito.
width="356" height="185"
A imagem original tem formato menos tosco https://encrypted-tbn3.gstatic.com/images?q=tbn:ANd9GcQEX1YX9SuoVTN1jodij4vDkzmyCdh1mAbJkJ9ReifV_mpM3Lt77g
Este domínio aparentemente é do google, então nada se pode concluir.
Vejamos o cabeçalho completo:
From *********@yahoo.com Fri Mar 21 22:51:39 2014
X-Apparently-To: *********@yahoo.com via 98.139.244.213; Sat, 22 Mar 2014 07:06:06 +0000
Return-Path:
X-YahooFilteredBulk: 138.91.3.183
Received-SPF: softfail (transitioning domain of hotmail.com does not designate 138.91.3.183 as permitted sender)
X-YMailISG: WLx2tYkWLDtOgNSOuHrmdfNU_8Vg3tAvYVyjlve109tYJgiG hhvrVcyk2XMLtzoWw.XJwSn_S66N4l.HiKbFJUZoss4rnvGuzNCbrrzfk1fn 4XehdeEwOPOYYUj6gSsmtK1HlVhT6XP3Zx6aJv3NY.85fhRjragl_RvI9Dxi r_9_zLHcDVjjzhtdLLzrRky4.s.l2e89SZT2IpyXJmfl6zjtpvh41MPZrMVc fOMaL1fixb3XwASspyAD463PFtCG6KYTa0dxLS49sUUvVvOpH6VIRaOJ91vs gdt8G_Fbudf6lThWnJ8dwpmZv7RiMqps20jh0uXjSCERt0Hqskh1KkDt4b7z L7nDBLcYXP1p0jlq05eHg7eSIXNu.JaeX2xGRnbjO54ZdlE5QNd2X.hGFEp6 IOsUUGlN7zGd6qnbZt6f7fLYLBccNn.2aOUCjsnL8X1k0ny2gbkCihI0EeSi 0tLNEfzJHMLOoWx1sJzVFWN5JPdKLlDRgdRf4iEgbdjhGMrZ_gzqVxjgDeZK GJLskoK6_RPz5ckA5CGDT_BOIHa0hCn1pewNR7TaovWqieCrNcCS_ur5WYfF d8yRx7FWgxFrTWTAWFDneU.6I36TIzbw23WNf2C80oXc2aa9QVG44Cx_T7bB NGx9l05yq_lE5KO5XgT9PFKLVGqYzdVnMwv7pbTWthnhheRfeeE3aWvPvuNS ldXA71HH2BXuEsxzlo6MSXnIKX5lK5Wa8vrjG6bUqT6InCHrbSFmZf4K2TUK cCkka9nVTBg34o_OGx2Q7S81iTqU3Jkb4ggRFDpsbUJ9MlcTeoG1L27KvGxs 7mDhLq0fXa91eO6s_cBgzz71VSJTP_ysVLYZ3WpLm6ZHGiQftJVHtxeRFn_n jbuCOEJYjvRpCoz9sZlKmc9f_w3_Ctl5xzY8SPNhJ78vPkqZFChIYa0JHGmg 5VJWgL485yZymP08gvhADtP8XqPmhJh_Rw3r8jXo6wNYvn8hntTrn4zqXnuo tmq1tdyxJ_1zKZn0ak2fc7KFdq57Xm0GNwRI0TY58mGVpaltP_P1ACCinhmO rWM4uNc6wBY0LEXwiCLd90y0TvLWx9AKlecQVmrU4WfEZv.agg7O6R.nKWsk I8fQjzGsVhRWSVQNIl2y03qkG2NjlwGQwj29UEd6bqdB.KoUv6s4fuysVK_F Q1X1wAcTxJpJvpmYjtoBHQdqPfME0Qb2GIsLkiFTRmwXKFK4_yX6HesmdgoC ulWwb4toLsFqR.916nWI6kOYDYxa0kDigeW.rc9vVEDlj.LQ6ZEe4BCLQFYA QavXe6eIgzdOK3kbp47ZwzpjttLIL_GFaAug8w5I5eDyBr2nGTYfYI9Y9u8P ZC2aigirQuZvOMbDv5BI4PshSMRS0lOhOWsovplNh7ry
X-Originating-IP: [138.91.3.183]
Authentication-Results: mta1549.mail.bf1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO ratieo.ratieo.l4.internal.cloudapp.net) (138.91.3.183) by mta1549.mail.bf1.yahoo.com with SMTP; Sat, 22 Mar 2014 07:06:06 +0000
Received: by ratieo.ratieo.l4.internal.cloudapp.net (Postfix, from userid 33) id BB4602A16C; Sat, 22 Mar 2014 05:51:39 +0000 (UTC)
To: *********@yahoo.com
Subject: Intimao de n. 39912047748392 (25732)
X-PHP-Originating-Script: 0:ssiml09.php
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
X-Mailer: Microsoft Office Outlook, Build 17.551210
Content-Transfer-encoding: 8bit
From: *********@yahoo.com
Reply-To: *********@yahoo.com
X-Mailer: iGMail [www.ig.com.br]
X-Originating-Email: *********@yahoo.com
X-Sender: *********@yahoo.com
X-iGspam-global: Unsure, spamicity=0.570081 - pe=5.74e-01 - pf=0.574081 - pg=0.574081
Message-Id: <20140322062919 .bb4602a16c="" ratieo.ratieo.l4.internal.cloudapp.net="">
Date: Sat, 22 Mar 2014 05:51:39 +0000 (UTC)
Content-Length: 1529
Percebam que o email partiu de uma conta do IG.
Não bastase isso, o link fornecido vai para
http://tranportesssilo.hospedagemdesites.ws/
Tosco, nem se quer parece com algo que possivelmente seja do MP de verdade.
